Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
File:                     fYtUoMG_jx-cTJVpuXXKRuuobOc.mft (raw, json)
Hash identifier:          S0DmoFDMVVpoQ4iC6jfyxH9UreN975lduwlX7DmvKxY=
Subject key identifier:   D9:72:0A:64:83:16:D8:94:1C:40:6A:47:B4:F5:03:E9:5B:A1:F9:35
Authority key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7
Certificate issuer:       /CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
Certificate serial:       019D9BBE9A5008CE1ECB65B05A79571FA9DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
Manifest number:          014A
Signing time:             Fri 17 Apr 2026 14:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:52 +0000
Files and hashes:         1: AXRVN_DR5BycQVCdRUvhSmejAc8.asa (hash: W8JeQq9+EkgLaIUZ5BFcb8k9jWkbcN2YzZXMIaK67Sg=)
                          2: fYtUoMG_jx-cTJVpuXXKRuuobOc.crl (hash: IFi/tDkEgrQ6ChZtIsESae4irpQQOdKg4yLkcPI93wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:9a:50:08:ce:1e:cb:65:b0:5a:79:57:1f:a9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
        Validity
            Not Before: Apr 17 14:00:52 2026 GMT
            Not After : Apr 18 14:00:52 2026 GMT
        Subject: CN=d9720a648316d8941c406a47b4f503e95ba1f935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:6a:3d:e0:3d:c9:c4:ab:99:d5:8d:10:d1:
                    94:8e:51:76:c2:27:e8:fc:c5:f4:14:1c:47:24:ba:
                    2f:6d:59:31:84:3a:89:39:21:17:c1:dc:72:ad:84:
                    b7:72:8b:d9:89:63:04:52:f4:42:0f:58:50:74:21:
                    fe:f2:e0:65:15:94:f9:39:2f:3e:66:26:78:e8:67:
                    b3:46:85:8d:78:dd:c2:cf:d9:42:14:f5:a9:b0:19:
                    ff:7a:63:ac:ee:53:e3:94:35:49:9d:b3:76:26:61:
                    97:85:3f:d1:04:cb:79:34:88:a6:6f:f9:5c:20:fe:
                    5d:d0:54:64:eb:0e:bc:9d:31:a3:48:33:31:94:6a:
                    96:71:d8:96:de:30:84:30:d8:27:a3:cc:76:90:85:
                    a1:22:f9:e3:db:f1:62:1a:f1:5f:c9:0e:ba:9a:31:
                    dc:8c:c7:f7:e5:93:14:81:d0:27:9b:fd:a9:ff:59:
                    f6:3f:1a:20:12:92:56:ed:6b:a1:62:7f:2c:8a:8e:
                    8b:14:a3:ae:6c:e0:81:a1:45:5f:8d:cb:ed:08:2c:
                    04:64:78:f6:94:78:30:02:c5:73:e0:d2:bd:e8:a3:
                    68:dd:6d:15:f0:51:d3:e7:67:02:e1:87:ea:f3:06:
                    98:83:ed:a9:51:6a:24:41:66:a9:32:5d:dd:3f:00:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:0A:64:83:16:D8:94:1C:40:6A:47:B4:F5:03:E9:5B:A1:F9:35
            X509v3 Authority Key Identifier:
                keyid:7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:26:3f:eb:79:1a:d0:ec:66:32:5d:cc:bc:2e:ba:54:d0:
         51:43:06:92:27:3a:b3:04:ff:35:4a:80:af:55:c2:be:04:6d:
         c5:ef:8c:bb:94:80:45:a2:bd:5e:17:a9:fd:2e:fd:35:0f:aa:
         64:ab:f7:ac:83:d6:42:aa:92:4a:cd:6b:c9:1a:f8:78:e0:22:
         99:4d:55:a9:e1:69:8c:1f:93:31:38:bf:e4:29:ef:af:b6:13:
         a2:57:21:83:75:75:b0:6c:c9:33:56:5d:8d:aa:b1:d3:75:62:
         c2:82:45:73:48:75:f4:fa:cc:98:e8:34:95:8b:d6:f1:b6:89:
         e9:74:ab:b6:f2:17:cd:87:f7:89:15:b0:61:60:55:16:8e:6b:
         f9:90:df:6f:a0:79:3e:3a:a9:b0:2c:00:1d:3c:ee:dd:9c:bd:
         65:d4:93:85:37:fd:4f:df:66:38:38:f7:e2:e7:18:d5:1a:27:
         0a:7e:19:8b:99:51:ec:b7:30:c3:fb:08:25:c0:6f:24:c9:4f:
         94:0f:ea:de:a4:97:14:44:08:32:bd:64:44:79:80:30:4a:0a:
         77:cf:f6:bc:e0:6a:72:30:a8:24:ec:1d:6a:fb:f9:6e:32:7f:
         1b:4e:57:bf:c7:4f:c9:4e:83:2d:17:16:04:e4:51:16:92:19:
         1f:38:9a:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvppQCM4ey2WwWnlXH6neMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOGI1NGEwYzFiZjhmMWY5YzRjOTU2OWI5NzVjYTQ2ZWJh
ODZjZTcwHhcNMjYwNDE3MTQwMDUyWhcNMjYwNDE4MTQwMDUyWjAzMTEwLwYDVQQD
EyhkOTcyMGE2NDgzMTZkODk0MWM0MDZhNDdiNGY1MDNlOTViYTFmOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYNqPeA9ycSrmdWNENGUjlF2wifo
/MX0FBxHJLovbVkxhDqJOSEXwdxyrYS3covZiWMEUvRCD1hQdCH+8uBlFZT5OS8+
ZiZ46GezRoWNeN3Cz9lCFPWpsBn/emOs7lPjlDVJnbN2JmGXhT/RBMt5NIimb/lc
IP5d0FRk6w68nTGjSDMxlGqWcdiW3jCEMNgno8x2kIWhIvnj2/FiGvFfyQ66mjHc
jMf35ZMUgdAnm/2p/1n2PxogEpJW7WuhYn8sio6LFKOubOCBoUVfjcvtCCwEZHj2
lHgwAsVz4NK96KNo3W0V8FHT52cC4Yfq8waYg+2pUWokQWapMl3dPwAjpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlyCmSDFtiUHEBqR7T1A+lbofk1MB8GA1UdIwQY
MBaAFH2LVKDBv48fnEyVabl1ykbrqGznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2Mt
ZjUyMjc2YmU5ZTFlLzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2MtZjUyMjc2YmU5ZTFl
LzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFsmP+t5
GtDsZjJdzLwuulTQUUMGkic6swT/NUqAr1XCvgRtxe+Mu5SARaK9Xhep/S79NQ+q
ZKv3rIPWQqqSSs1ryRr4eOAimU1VqeFpjB+TMTi/5Cnvr7YTolchg3V1sGzJM1Zd
jaqx03ViwoJFc0h19PrMmOg0lYvW8baJ6XSrtvIXzYf3iRWwYWBVFo5r+ZDfb6B5
PjqpsCwAHTzu3Zy9ZdSThTf9T99mODj34ucY1RonCn4Zi5lR7Lcww/sIJcBvJMlP
lA/q3qSXFEQIMr1kRHmAMEoKd8/2vOBqcjCoJOwdavv5bjJ/G05Xv8dPyU6DLRcW
BORRFpIZHziaWw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:33 2026 by rpki-client